> Read access is allowed by role root to /sys, the directory which holds entries that often leak information from the kernel. Ну и как ему сказать, что мне ок?